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CLAIMS 

1. A method for controlling exchange of private information associated 
with a client device, said method comprising: 

(a) receiving a request from the client device; 

(b) determining whether a privacy agreement is needed to respond to 
the request; 

(c) negotiating a privacy agreement that governs the exchange of the 
private information when said determining (b) determines that a privacy 
agreement is needed; and 

(d) thereafter producing a response to the request. 

2. A method as recited in claim 1, wherein the private information 
includes location information of the client device. 

3. A method as recited in claim 1, wherein said producing (d) comprises: 
(dl) receiving the private information associated with the client device; 

and 

(d2) producing the response to the request based at least in part on the 
private information. 

4. A method as recited in claim 3, wherein the private information 
includes location information of the client device. 
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5. A method as recited in claim 4, wherein the client device is associated 
with a network, and 

wherein the location information is at least one of client-provided and 
network-provided. 

6. A method as recited in claim 3, wherein said method is performed on a 
server. 

7. A method as recited in claim 6, wherein the private information is 
attached to the request. 

8. A method as recited in claim 1, wherein the client device is a wireless 
device. 

9. A method for exchanging private information associated with a client 
device to a server device via a proxy server, said method comprising: 

establishing an authorization agreement that enables the proxy server 
to negotiate privacy agreements with server devices on behalf of the client 
device; 

receiving a request at the proxy server; 

receiving a proposed privacy agreement from the server device 
associated with the request; 

accepting the proposed privacy agreement as a privacy agreement by 
the proxy server for the client device when in accord with the authorization 
agreement; and 
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providing the private information to the server device after 
establishment of the privacy agreement. 

10. A method as recited in claim 9, 

wherein said method further comprises: 

negotiating the privacy agreement by the proxy server for the 
client device when not in accord with the authorization agreement, and 

wherein said providing the private information to the server device is 
performed after said accepting of the proposed privacy agreement as the 
privacy agreement or after said negotiating of the privacy agreement. 

11. A method as recited in claim 9, wherein the private information 
includes location information of the client device. 

12. A method as recited in claim 11, wherein the client device is associated 
with a network, and 

wherein the location information is at least one of client-provided and 
network-provided. 

13. A method as recited in claim 11, wherein the request is received at the 
proxy server and the response is produced by the server device. 

14. A method as recited in claim 13, wherein the request includes the 
private information associated with the client device. 
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15. A method as recited in claim 14, wherein said providing operates to 
provide the private information to the server device after said accepting of the 
proposed privacy agreement as the privacy agreement or after said negotiating 
of the privacy agreement. 

16. A method as recited in claim 15, wherein said providing operates to 
refuse to provide the private information to the server device when both the 
proposed privacy agreement is not accepted and negotiating of the privacy 
agreement is unsuccessful. 

17. A method as recited in claim 9, wherein said method further 
comprises: 

determining whether an existing privacy agreement already exists for 
the server device and the client device; and 

bypassing said receiving of the proposed privacy agreement and said 
accepting of the proposed privacy agreement when said determining operates 
to determine that an existing privacy agreement already exists for the server 
device and the client device. 

18. A method as recited in claim 17, wherein said determining of an 
existing privacy agreement already exists comprises: 

identifying an existing agreement between the server device and the 
client device, the existing agreement having a predetermined coverage; and 

determining whether the request is covered by the predetermined 
coverage of the identified existing agreement. 
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19. A method for controlling exchange of private information associated 
with a client device supported by a carrier network infrastructure, said method 
comprising: 

(a) receiving a request from the client device, the request being 
directed to a server device; 

(b) determining whether a privacy agreement is needed to respond to 
the request; 

(c) determining whether the server device is authorized to receive the 
private information associated with the client device when said determining 
(b) determines that a privacy agreement is needed; and 

(d) providing the private information to the server device associated 
with the request when said determining (c) determines that the server device is 
authorized to receive the private information associated with the client device. 

20. A method as recited in claim 19, wherein the client device is a wireless 
client device, and 

wherein the private information includes location information of the 
client device. 

21. A method as recited in claim 19, wherein said method further 
comprises: 

(e) thereafter producing a response to the request at the server device. 

22. A method as recited in claim 21, wherein said producing (e) comprises: 
(el) receiving the private information associated with the client device; 

and 
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(e2) producing the response to the request based at least in part on the 
private information. 

23. A method as recited in claim 22, wherein the private information 
includes location information of the client device. 

24. A method as recited in claim 19, wherein the request includes a URL, 
and 

wherein said determining (c) comprises: 

(cl) comparing the URL of the request with a list of authorized 

URLs; and 

(c2) determining that the server device is authorized to receive 
the private information associated with the client device when said comparing 
(cl) determines that the URL of the request is found within the list of 
authorized URLs. 

25. A system for controlling information exchange between a wireless 
client device and server devices, the wireless client device being supported by 
a wireless network, said system comprising: 

a proxy server device operatively connected between the wireless 
client device and the server device, said proxy server device manages 
distribution of private information associated with the wireless client device to 
the server devices, said proxy server device includes at least 

a storage area, said storage area stores information received 
from at least one of the wireless client device and from the wireless network; 
and 
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a privacy manager, said privacy manager operates to restrict the 
release of the information received from the wireless client device and the 
wireless network to the one or more of the server devices unless a suitable 
privacy agreement governing the use of the information is in place for the one 
or more server devices. 

26. A system as recited in claim 25, wherein the information received from 
at least one of the wireless client device and the wireless network comprises 
location information associated with the location of the wireless client device. 

27. A system as recited in claim 25, 

wherein the information received from the wireless client device and 
the wireless network comprises location information associated with the 
location of the wireless client device, and 

wherein said system further comprises: 

a location manager, said location manager performs a 
reconciliation and/or canonicalization process on the location information 
received from the wireless client device and the wireless network to produce a 
determined location. 

28. A system as recited in claim 27, wherein said privacy manager 
operates to restrict the release of the determined location to the one or more of 
the server devices unless a suitable privacy agreement governing the use of the 
determined location is in place for the one or more server devices. 

29. A system as recited in claim 28, wherein the suitable privacy 
agreement is provided in a markup language. 
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30. A system as recited in claim 28, wherein said privacy manager can 
further negotiate with the one or more server devices to establish a suitable 
privacy agreement. 

31. A system as recited in claim 25, wherein said privacy manager can 
further negotiate with the one or more server devices to establish a suitable 
privacy agreement. 

32. A system as recited in claim 25, wherein the information received from 
at least one of the wireless client device and the wireless network comprises 
subscriber information associated with the subscriber of the wireless client 
device. 

33. A system as recited in claim 25, wherein the information includes 
private information and non-private information, and 

wherein said privacy manager restricts access to the private 
information but not the non-private information. 

34. A computer readable medium including computer program code for 
controlling exchange of private information associated with a client device, 
said computer readable medium comprising: 

computer program code for receiving a request from the client device; 

and 

computer program code for negotiating a privacy agreement that 
governs the exchange of the private information. 



Atty.Dkt.No.: UWP1P026/UP-1091 



35 



# + 

35. A computer readable medium including computer program code for 
exchanging private information associated with a client device to a server 
device via a proxy server, said computer readable medium comprising: 

computer program code for establishing an authorization agreement 
that enables the proxy server to negotiate privacy agreements with server 
devices on behalf of the client device; 

computer program code for receiving a request at the proxy server; 

computer program code for receiving a proposed privacy agreement 
from the server device associated with the request; 

computer program code for accepting the proposed privacy agreement 
as a privacy agreement by the proxy server for the client device when in 
accord with the authorization agreement; and 

computer program code for providing the private information to the 
server device after establishment of the privacy agreement. 

36. A computer readable medium including computer program code for 
controlling exchange of private information associated with a client device 
supported by a carrier network infrastructure, said computer readable medium 
comprising: 

computer program code for receiving a request from the client device, 
the request being directed to a server device; 

computer program code for determining whether the server device is 
authorized to receive the private information associated with the client device; 
and 

computer program code for providing the private information to the 
server device associated with the request when said determining determines 
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whether the server device is authorized to receive the private information 
associated with the client device determines that the server device is 
authorized to receive the private information associated with the client device. 
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